People trust their AI assistants and it’s easy to abuse this trust This article has been indexed from www.theregister.com – Articles Read the original article: Red teamers turned Claude Desktop into a double agent to do their evil bidding
Tag: www.theregister.com – Articles
Infosec professionals sour on automated pentesting tools
29% of security pros were open to fully autonomous pentesting last year; now only 9% are This article has been indexed from www.theregister.com – Articles Read the original article: Infosec professionals sour on automated pentesting tools
Huntress CEO says threat hunter used ‘poor judgment’ in alerting ransomware crim about law enforcement probe
Ex-employee claims this ‘meets the definition of an insider threat’ This article has been indexed from www.theregister.com – Articles Read the original article: Huntress CEO says threat hunter used ‘poor judgment’ in alerting ransomware crim about law enforcement probe
Microsoft builds a bouncer to keep bots out of Teams meetings
Allows ISVs to put their names on the door so desirable bots always get in This article has been indexed from www.theregister.com – Articles Read the original article: Microsoft builds a bouncer to keep bots out of Teams meetings
India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked sensitive info
Open API leaked everything an attacker needs to impersonate bank officials This article has been indexed from www.theregister.com – Articles Read the original article: India’s central bank mandated use of .bank domains to enhance trust – but its registry leaked…
Security researchers tricked LLMs into giving them cocaine recipes by abusing role models for prompt injection
If you want a picture of the future of LLM security, imagine Whac-a-Mole meets Groundhog Day This article has been indexed from www.theregister.com – Articles Read the original article: Security researchers tricked LLMs into giving them cocaine recipes by abusing…
Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe
Not today, Putin This article has been indexed from www.theregister.com – Articles Read the original article: Four years into Ukraine invasion, Russia turns influence-ops back to US and Europe
Anonymous researcher drops 0-day ‘exploitarium’ repo
At least two vulnerabilities are already under attack This article has been indexed from www.theregister.com – Articles Read the original article: Anonymous researcher drops 0-day ‘exploitarium’ repo
AI may be good at finding security vulnerabilities, but it can’t beat human stupidity
You don’t need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world’s password habits are so sloppy This article has been indexed from www.theregister.com – Articles Read the original article: AI may be good at finding security…
Microsoft keeps Windows Server 2022 hotpatching alive into 2027
In the Azure Edition, of course This article has been indexed from www.theregister.com – Articles Read the original article: Microsoft keeps Windows Server 2022 hotpatching alive into 2027
Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs
Carmaker points finger at an ‘unknown’ flaw as customer fallout continues This article has been indexed from www.theregister.com – Articles Read the original article: Nissan says Oracle PeopleSoft break-in may have spilled payroll records, SSNs
It’s looking like a hot, messy summer for security teams as AI finds countless previously hidden vulns
Time to start praying to the goddess of wisdom and war This article has been indexed from www.theregister.com – Articles Read the original article: It’s looking like a hot, messy summer for security teams as AI finds countless previously hidden…
Even the Secret Service won’t use company-issued phones
Personal cell phones on protective missions, no threat detection on government-issued devices among the litany of sins This article has been indexed from www.theregister.com – Articles Read the original article: Even the Secret Service won’t use company-issued phones
Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds
Researchers warn many AI coding assistants now execute commands from project configurations This article has been indexed from www.theregister.com – Articles Read the original article: Amazon Q flaw let booby-trapped Git repos execute code, swipe cloud creds
Miasma campaign poisons 20-plus npm packages, hunts for developer secrets
Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers This article has been indexed from www.theregister.com – Articles Read the original article: Miasma campaign poisons 20-plus npm packages, hunts for developer secrets
Security boss thought MFA would be too much security
One rule for the workers, another for execs This article has been indexed from www.theregister.com – Articles Read the original article: Security boss thought MFA would be too much security
Chinese cybersecurity company claims it’s built a better-than-Mythos bug finder
Qihoo 360, which the US has banned, says it’s needed as a deterrent to weaponized Anthropic models This article has been indexed from www.theregister.com – Articles Read the original article: Chinese cybersecurity company claims it’s built a better-than-Mythos bug finder
Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs
Spotted in intrusions targeting insurance, education, IT, and professional services sectors This article has been indexed from www.theregister.com – Articles Read the original article: Self-destructing Mistic backdoor linked to access broker selling corporate footholds to ransomware gangs
Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues
Former employee accuses company of prioritizing pending IPO over client security This article has been indexed from www.theregister.com – Articles Read the original article: Ex-Huntress analyst claims company insider fed info to a ransomware crim. Social media drama ensues
UK school’s network left wide open for invasion, student found
And the admin password was right in the Active Directory description field This article has been indexed from www.theregister.com – Articles Read the original article: UK school’s network left wide open for invasion, student found